Bug#752272: Last certificate not self-signed

2014-06-23 Thread Jo Drexl
Am Sonntag, den 22.06.2014, 19:54 +0200 schrieb Andreas Metzler: > * certtool --verify --load-ca-certificate cacert.pem --infile \ BTW: The --verify parameter doesn't exist in the stable package. It was introduced afterwards. But cat-ing them into one testfile and verify the chain then works, yo

Bug#752272: Last certificate not self-signed

2014-06-22 Thread Jo Drexl
Hi, OK, I'm not really understanding why this fails (since I give the CA-cert as well as the certificate to verify in both cases), but either way it doesn't matter. My point, all certificates based on a self-signed CA-certificate cease working with libvirt with the testing package still is valid, a

Bug#752272: Last certificate not self-signed

2014-06-22 Thread Andreas Metzler
On 2014-06-22 Jo Drexl wrote: > Am Sonntag, den 22.06.2014, 08:22 +0200 schrieb Andreas Metzler: >> On 2014-06-22 Jo Drexl wrote: >>> After installing the stable package and rerunning 'certtool -e >>> --load-ca-certificate cacert.pem --infile servercert.pem', the outcome >>> was: >> [...] >>> It

Bug#752272: Last certificate not self-signed

2014-06-22 Thread Jo Drexl
Am Sonntag, den 22.06.2014, 08:22 +0200 schrieb Andreas Metzler: > On 2014-06-22 Jo Drexl wrote: > > After installing the stable package and rerunning 'certtool -e > > --load-ca-certificate cacert.pem --infile servercert.pem', the outcome > > was: > [...] > > It seems the self-sign for snakeoil C

Bug#752272: Last certificate not self-signed

2014-06-21 Thread Andreas Metzler
On 2014-06-22 Jo Drexl wrote: > After installing the stable package and rerunning 'certtool -e > --load-ca-certificate cacert.pem --infile servercert.pem', the outcome > was: [...] > It seems the self-sign for snakeoil CAs is broken. > Good luck, I don't think I'm of much use here, still playing a

Bug#752272: Last certificate not self-signed

2014-06-21 Thread Jo Drexl
After installing the stable package and rerunning 'certtool -e --load-ca-certificate cacert.pem --infile servercert.pem', the outcome was: Certificate[0]: CN=testserver,O=Server.inc Issued by: CN=testserver,O=Server.inc certtool: the last certificate is not self signed With the backports